EV THE CLAIMS 



This listing of claims will replace all prior versions, and listings, of claims in the 
application: 
Listing of Claims: 

L (Currently amended) A method of protectmg a file, comprising: 

requesting access to a file; 
accessing a vnode associated with the file; and 
executing a substitute routine associated with the vnode; 
wherein the vnode is a modified vnode . 

2. (Original) The method of claim 1, wherein die substitute routine is associated with 

the request. 

3. (Cancelled) 

4. (Original) The method of claim 1, wherein executing uicludes protecting the file. 

5. (Original) The method of claim 1, wherein executing includes blocking access to the 
file. 

6. (Original) The method of claim 1, wherem executing includes blocking write access 
to the file. 

7. (Original) The method of claim 1, wherein the vnode is associated with a substitute 
operations vector associated with the substitute routine. 

8. (Original) The method of claun 1, wherein the vnode includes a pointer that points to 
a substitute operations vector associated with the substitute routine. 

9. (Original) The method of claim 1, wherem the vnode includes a pointer diat points to 
a substitute operations vector that calls the substitute routine. 

10. (Original) The method of claim 1, further comprising configuring the file for 
protection. 
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1 1 . (Original) The method of claim 10, wherein configuring includes: 

accessing the vnode associated with the file; and 
modifying the vnode. 

12. (Original) The method of claim 1, further comprismg: 

determining an operation to be protected; and 

modifying in the vnode a routine associated with the operation. 

13. (Original) The method of claim 1, further comprising holding die vnode in memory. 

14. (Original) The method of claim 1, further comprising saving an original operations 
vector. 

15. (Original) The method of claim 1, further comprising: 
determining whether the file exists; 

providing notification when the file is created if the file does not exist. 

16. (Original) The method of claim 1, further comprising configuring the file for 

protection prior to runtime. 

17. (Origmal) The method of claim 1, further comprising: 

modifying the vnode. 

18. (Original) The method of claim 1, further comprising: 

associating the vnode with a substitute routine. 

19. (Original) The method of claim 1, further comprising: 

associating the vnode with a substitute operations vector associated with a substitute 

routine. 

20. (Origmal) The method of claim 1, further comprising: 

modifying a pointer associated with the vnode to point to a substitute operations vector 
associated with a substitute routine. 

21. (Original) The method of claim 1, further comprising: 

modifying a pointer associated with the vnode to point to a substitute operations vector 
that calls a substitute routine. 

22. (Original) The method of claim 1, further comprising removing protection of the file. 
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23. (Original) The method of claim 22, wherein removing includes: 

accessing the vnode associated with the file; and 
modifying the vnode. 

24. (Original) The method of claim 1, further comprising releasing a hold on the vnode. 

25. (Original) The method of claim 1, further comprising: 

associating the vnode with an original routine. 

26. (Original) The method of claim 1, further comprising: 

associating the vnode with an original operations vector associated with an original 

routine. 

27. (Original) The method of claim 1, wherein the vnode is a vnode in a UNIX system. 

28. (Original) The method of claim 1, wherein die vnode is an inode in a Linux system. 

29. (Currently amended) A system for protecting a file, comprising a processor and memory 

configured to: 

request access to a file; 

access a vnode associated with the file; and 

execute a substitute routine associated with the vnode; 

wherein the vnode is a modified vnode . 

30. (Currently amended) A computer program product for protectmg a file, the computer 

program product being embodied in a computer readable medium and comprising computer 

instructions for: 

requesting access to a file; 
accessing a vnode associated with the file; and 
executing a substitute routine associated with the vnode; 
wherein the vnode is a modified vnode. 
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